Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
File: epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft (raw, json)
Hash identifier: n8TcrofVGQOss2B8I9Ijh9NjmUqGcHyu05vLDc0G4gw=
Subject key identifier: 3F:41:D9:E4:CB:43:4F:B6:68:9A:33:63:13:B3:CE:42:72:B9:61:33
Authority key identifier: 7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
Certificate issuer: /CN=7a938a935f8baf9cd933906416590d782e7287c7
Certificate serial: 01A06E70ECCB423A215F98EE1CF3899A3B51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
Manifest number: 1A38
Signing time: Fri 04 Sep 2026 22:01:29 +0000
Manifest this update: Fri 04 Sep 2026 22:01:29 +0000
Manifest next update: Sat 05 Sep 2026 22:01:29 +0000
Files and hashes: 1: BEwSGx2LrGrF0sGwEj968AwEhBQ.roa (hash: FOuyYaW0tTl+dteUWOtoA2lUPrG6Wb17DxcFxBecsSA=)
2: O1kpwtflKFENDMxtFw4AMwXy_Eg.roa (hash: bFGH8x7w1VMHVR7CRYJvYNDIa0FPd2nWUvLigwhxhc4=)
3: aUl8lpeM_cK5FLKbeF7Bav-pQik.roa (hash: VJooy4RdmsLaFuxZcWrZ5R9B5jb/JnWIuGjdSyDjKws=)
4: epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl (hash: o8KRsPrZon6BUHh95dY/U0wUbzK4L8P3koxK/RX/lUM=)
5: t_IFzY8Fmcbu_ECs1VYwATKRDVM.roa (hash: zPmzKv9Sv3CWVQ7tS1fG8zEgGyRJzdU51E/8+5c5c+Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6e:70:ec:cb:42:3a:21:5f:98:ee:1c:f3:89:9a:3b:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a938a935f8baf9cd933906416590d782e7287c7
Validity
Not Before: Sep 4 22:01:29 2026 GMT
Not After : Sep 5 22:01:29 2026 GMT
Subject: CN=3f41d9e4cb434fb6689a336313b3ce4272b96133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2c:2b:ca:0b:af:96:b2:5d:31:95:ee:74:ec:
0e:bf:a1:7c:5d:29:a5:7f:1c:04:6c:bd:3b:cb:a3:
5f:8e:f5:af:7a:98:65:e1:22:06:84:87:85:e6:54:
73:71:dd:7a:a4:2c:a8:88:a2:1f:cc:3f:30:61:31:
8c:1c:75:1b:aa:c1:be:62:9d:80:69:6e:90:19:e9:
a8:59:05:d7:18:f9:3f:bc:c1:1f:3e:4b:5b:18:e2:
ef:13:9e:f8:8a:64:7a:23:42:cc:10:02:00:67:6a:
ba:87:50:7f:e1:5d:a4:85:77:f2:e7:d5:8a:cc:48:
49:74:c2:0f:f2:53:7e:2f:e5:f5:16:f1:28:b6:a1:
7d:61:5e:93:4a:72:c0:18:ad:46:d6:3e:78:db:c5:
49:8b:ac:8e:b3:24:f3:22:01:9c:0a:7e:8a:c9:44:
43:df:ed:5e:1c:dc:a4:57:fc:96:f2:b4:56:7a:99:
08:f7:92:09:06:aa:fb:a5:fb:da:ae:d1:89:08:29:
0d:ad:89:15:6e:4c:bd:b3:83:7c:65:12:e5:9d:ca:
8a:3a:e7:87:49:e0:1c:12:bf:b1:c3:5d:39:67:71:
74:6f:bf:da:d8:25:e3:7c:0e:84:c7:f7:bb:45:71:
fb:c4:40:c3:07:7c:26:3c:01:53:c6:6e:f0:cc:1f:
76:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:41:D9:E4:CB:43:4F:B6:68:9A:33:63:13:B3:CE:42:72:B9:61:33
X509v3 Authority Key Identifier:
keyid:7A:93:8A:93:5F:8B:AF:9C:D9:33:90:64:16:59:0D:78:2E:72:87:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/epOKk1-Lr5zZM5BkFlkNeC5yh8c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ff0bfc-26fe-4412-a232-31999f3add36/1/epOKk1-Lr5zZM5BkFlkNeC5yh8c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a8:f5:20:5f:4f:32:74:82:11:42:68:6b:f9:6a:e5:6b:46:6b:
1b:2d:08:72:64:54:a9:ec:52:cf:5d:77:20:24:7e:4b:76:42:
b7:6b:14:00:55:ff:71:d2:cf:aa:1b:64:00:ba:ef:25:fe:b8:
35:86:1f:7e:ab:79:cc:90:64:62:24:94:76:61:b8:37:22:41:
b6:bb:eb:00:18:20:36:ab:5b:13:c1:97:b4:3b:d1:14:74:fe:
de:f5:cb:0d:c4:69:c9:e4:ba:d0:56:b5:ec:b3:d9:59:a5:30:
a7:54:9e:8a:f7:19:0b:c8:4f:95:aa:4f:cc:e9:a7:4d:2e:25:
92:d8:ce:07:1c:80:c6:16:07:81:73:2c:26:3d:ac:6a:6f:a9:
a2:af:67:65:3e:af:77:31:36:0c:15:df:aa:2b:c3:f7:a3:17:
9b:d2:2f:f7:a4:d6:e0:81:36:3a:e4:99:8d:e3:c0:4f:24:a9:
b2:3e:76:88:b2:d7:b7:0d:cd:7d:4e:5c:b2:50:09:ab:a4:ab:
8c:87:c0:37:64:9e:53:54:ed:28:d4:86:0b:f8:27:57:27:6a:
c2:10:c5:6c:35:4c:10:38:94:28:ec:39:e0:9c:81:d4:ee:1c:
ab:c3:89:76:d6:88:b0:d7:88:1c:aa:ef:66:1d:ed:ad:6d:9d:
62:01:ae:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:23:46 2026 by rpki-client